Solved

Hide/remove "administrative tools" from Start up menu

Posted on 2010-08-20
7
2,361 Views
Last Modified: 2012-05-10
How can I hide/remove "administrative tools" from Start up menu on a Windows 2008 R2 Terminal Server for the users

I want to hide/remove "administrative tools" from the users but not the administrator.

Also I can't disable powershell for the users on terminal sessions trough GPO

The DC is a Windows Server 2003 and the Terminal Server is a Windows 2008 R2.
0
Comment
Question by:Gerhardpet
7 Comments
 
LVL 17

Expert Comment

by:sgsm81
ID: 33485587
Open the GPO in gpedit.msc and go to:

User Config\Administrative Templates\Windows Components\Microsoft Management Console\ and restrict access to author mode and any MMC snap ins you don't want them to get to.

Once the policy is created, deny apply rights to the administrator
0
 
LVL 17

Expert Comment

by:sgsm81
ID: 33485597
0
 
LVL 3

Expert Comment

by:Willy Van den Houten
ID: 33485604
You can also use the Group Policy Managment Console
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 3

Accepted Solution

by:
meagain35 earned 500 total points
ID: 33485623
You can add as part of the login script to update the registry

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
Value Name: StartMenuAdminTools
Data Type: REG_SZ (String Value)
Value Data: Yes or No

This registry entry could also be set via GPO and only applied to users who are not in the "ServerAdmins" group for example.

0
 
LVL 3

Expert Comment

by:superggg
ID: 33485632
0
 
LVL 1

Author Closing Comment

by:Gerhardpet
ID: 33486189
Your solution worked but it is not a yes or no value and also on a Windows Server 2008 R2  the Start_AdminToolsRoot needs to have the value changed

The value on both keys needs to be changed from 2 to 0
0
 
LVL 1

Author Comment

by:Gerhardpet
ID: 33488701
meagain35,
Your solution worked but it is not a yes or no value and also on a Windows Server 2008 R2  the Start_AdminToolsRoot needs to have the value changed

The value on both keys needs to be changed from 2 to 0
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question